$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: 4kR0sAMTn7SG21w+UZOH6iNmZaUzgHSUyvLiN02NQUs= Subject key identifier: 20:6F:66:1C:80:70:91:F3:21:4B:64:31:B6:E3:67:5C:96:C5:A8:3C Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 3551 Signing time: Sat 04 Apr 2026 15:14:31 +0000 Manifest this update: Sat 04 Apr 2026 15:14:31 +0000 Manifest next update: Sat 11 Apr 2026 15:14:31 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: 6n0xqhfuVabTHY16Vu+xcvUdL/r9t5ZQBBX3Oc8FaaA=) 2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: ptlT7u2MhuBbu24nscPM+vqHy0ITbmTpmlMUOppZHGo=) 3: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: iWSJFLIeKe7hugY4ZJti1OftvD87R1nmtGDBBmbzeUA=) 4: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: G9rHcPIfPgJicicRoBaQDI5mj2H6x4dCQr+TJm0s7O8=) 5: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: pM9Clvnn4qCGji2jYA6fF0liiqMDQEIYWKiiYCa6P/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Apr 4 15:14:31 2026 GMT Not After : Apr 11 15:14:31 2026 GMT Subject: CN=69d12ad7-d85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:77:34:86:a5:63:99:0d:e5:59:51:13:11: c6:5f:5e:1f:e1:72:e2:67:3d:c8:ca:ae:a0:bb:4f: 3c:ee:52:be:85:a3:52:fe:39:fc:40:29:c2:99:ed: a4:82:79:44:f3:b7:3d:7c:34:17:11:6a:a0:eb:c3: e3:0a:3b:9f:80:56:ab:0b:d1:98:61:b9:11:75:c1: de:72:8e:52:e4:42:dd:5c:1c:4b:ed:3d:9d:23:71: 45:86:92:45:10:dd:47:6f:22:b8:a8:f2:96:ed:71: 76:7a:21:ec:fa:d6:73:50:7e:95:12:26:fe:90:06: 02:72:d9:fc:13:f4:09:66:e6:cc:51:df:da:09:f0: e3:84:e1:5f:83:28:24:a5:42:13:86:8d:8e:62:00: c7:94:8c:cc:90:e2:19:70:52:2d:ae:9c:0f:97:fb: 10:66:66:59:76:87:85:a9:c6:56:34:8e:88:d2:9c: 08:0e:0f:28:b9:1f:b6:40:81:1d:61:4a:2b:72:db: 76:1b:74:ba:f2:01:57:a1:b7:b6:cd:f8:0c:6a:75: bd:cb:ea:d4:51:dd:a9:40:dd:06:61:47:3e:c3:52: a0:81:86:1c:14:27:03:7e:24:3c:d7:c7:6b:42:bd: 72:6c:f9:ac:d0:41:c8:09:87:41:c8:28:1a:fa:e9: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:66:1C:80:70:91:F3:21:4B:64:31:B6:E3:67:5C:96:C5:A8:3C X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2f:9a:1a:c0:27:d2:7e:6a:42:3d:2c:6b:66:3e:7b:f3:89: db:31:ec:2d:8a:91:95:1a:d4:90:21:34:59:a5:16:ce:bb:bf: 7b:07:6a:9a:8f:44:ed:9c:16:42:1c:ea:65:b3:98:93:31:14: 0e:3f:1c:f6:92:c9:ee:d0:43:41:95:74:1d:4b:dd:58:3c:c2: 69:14:79:d0:2e:57:47:39:8a:2c:fc:04:c9:09:17:09:c1:ba: fe:98:e7:d4:b8:b9:db:47:72:4c:08:7f:f8:c5:9c:7c:a8:c6: 56:39:03:e4:3c:2e:b5:0d:93:cc:db:14:99:66:b5:0a:26:b9: 9e:f9:5d:f4:8c:0e:78:94:49:fc:81:80:26:f8:7d:f5:0e:b2: b8:80:48:bc:36:ff:50:bf:d0:d6:75:4c:a8:30:3c:bb:d2:fc: f4:37:98:93:f6:c0:63:bc:d5:90:0b:a6:7b:2d:93:2c:df:d0: 6d:0e:02:52:62:f8:be:98:46:03:6c:b4:98:07:63:cf:65:1a: d1:17:26:5c:9f:a5:a4:04:bb:0f:10:d7:fd:a6:c9:d7:a2:1e: 22:ee:8d:76:ad:af:73:83:55:7e:04:24:bf:23:92:03:e5:f1: 13:80:7b:3d:31:72:c2:43:ee:a3:ee:72:b1:c8:b9:6e:3b:1f: 14:d8:78:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjYwNDA0MTUxNDMxWhcNMjYwNDExMTUxNDMxWjAYMRYwFAYD VQQDEw02OWQxMmFkNy1kODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgp3NIalY5kN5VlRExHGX14f4XLiZz3Iyq6gu0887lK+haNS/jn8QCnCme2k gnlE87c9fDQXEWqg68PjCjufgFarC9GYYbkRdcHeco5S5ELdXBxL7T2dI3FFhpJF EN1HbyK4qPKW7XF2eiHs+tZzUH6VEib+kAYCctn8E/QJZubMUd/aCfDjhOFfgygk pUITho2OYgDHlIzMkOIZcFItrpwPl/sQZmZZdoeFqcZWNI6I0pwIDg8ouR+2QIEd YUorctt2G3S68gFXobe2zfgManW9y+rUUd2pQN0GYUc+w1KggYYcFCcDfiQ818dr Qr1ybPms0EHICYdByCga+ukfDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBvZhyA cJHzIUtkMbbjZ1yWxag8MB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALS+aGsAn0n5qQj0sa2Y+e/OJ2zHsLYqRlRrUkCE0WaUWzru/ewdqmo9E7ZwW QhzqZbOYkzEUDj8c9pLJ7tBDQZV0HUvdWDzCaRR50C5XRzmKLPwEyQkXCcG6/pjn 1Li520dyTAh/+MWcfKjGVjkD5DwutQ2TzNsUmWa1Cia5nvld9IwOeJRJ/IGAJvh9 9Q6yuIBIvDb/UL/Q1nVMqDA8u9L89DeYk/bAY7zVkAumey2TLN/QbQ4CUmL4vphG A2y0mAdjz2Ua0RcmXJ+lpAS7DxDX/abJ16IeIu6Ndq2vc4NVfgQkvyOSA+XxE4B7 PTFywkPuo+5ysci5bjsfFNh4GA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:00:07 2026 by rpki-client